Senior DevSecOps Engineer

Who you are

• Deep understanding of cloud-native architecture (AWS) and modern security best practices
• Proven experience designing "self-service" platforms that developers actually want to use
• Strong communication skills—the ability to turn complex security concerns into decisions engineers and stakeholders can act on
• High proficiency in at least one modern language and familiarity with agent-based/AI-assisted development tools
• Pragmatism—knowing when to accept calculated tech debt in favor of high-impact outcomes
• A leadership style rooted in empathy, collaborative debate, and commitment to team decisions
• Builds systems, documentation, and team capability that outlast you — we're wary of highly productive engineers who leave behind bespoke, unmaintainable tooling that has to be scrapped when they move on
• The requirements listed in the job descriptions are guidelines. You don’t have to satisfy every requirement or meet every qualification listed. If your skills are transferable we would still love to hear from you

What the job involves

• The DevSecOps Engineer is a leadership and individual contributor role responsible for maturing our security posture across all engineering departments
• You will lead the design and implementation of automated, platform-based security solutions, enabling teams to build secure software while maintaining velocity
• You will partner closely with Core Tech, Product, and Engineering leadership to define our security roadmap and culture
• We’re excited about you because you are a trailblazer who balances high-level strategy with hands-on technical execution
• You are comfortable building from near-scratch, thrive on educating others, and possess a "platform" mindset that prioritizes empowering developers over acting as a gatekeeper
• Define and execute a multi-quarter security roadmap for the entire engineering organization
• Develop and maintain platform-level security tools that enable automated, self-service security for feature teams
• Partner with Core Tech to integrate security primitives into our standard CI/CD and cloud deployment workflows
• Conduct cross-team discovery to assess current security posture and identify high-risk technical debt
• Mentor junior and peer engineers, fostering a culture where security is integrated into the "you build it, you run it" philosophy
• Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure
• Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform — this role inherits live systems, it isn't a blank canvas
• Act as a security collaborator to IT on AI-usage risk (data exposure via connectors/agents, prompt injection) — distinct from, and in addition to, securing the AI systems Hiya builds as a product
• The person in this role must embody Hiya’s key values of Serving our customers, Doing rather than observing, Improving ourselves and our business, Owning and holding ourselves accountable for success, and Leading by showing up with a point of view, engaging in open discussion, listening respectfully to others opinions and committing to decisions

Benefits

• Stock Options
• 100% Covered Medical, Dental and Vision
• 401K Program
• Vacation Package
• Paid Parental Leave
• Commuter Benefits
• Employer Covered Long-term Disability and Life Insurance
• Employee Learning and Development Budget
• Charitable Matching